I'm not sure but i know when someone logs into samba on an os 10 machine they get a user smbd process, does that happen with afp users, and by killing the process wont it disconnect the user?
ps might be your tool of choice. "ps | grep -i serverprocess" ... I think the serverprocess should be "applefileserver", but top and or ps will tell you that.